Resources

How Okta for AI Agents Maps to NIST's Design Tenets for Agent Identity

Okta for AI Agents: Meeting NIST Design Tenets

NIST says it plainly: "Guardrails alone are insufficient." An instruction hidden in a document, web page, or email can steer an agent with broad access. This datasheet maps Okta for AI Agents to each of the ten design tenets in NIST's post, Design Tenets for Agent Identity Management Systems. It shows where the product covers a tenet today, where it covers one in part, and where it is on the roadmap.

  • Distinct agent identity: register homegrown agents, import agents from other platforms, and find shadow agents, each with a named human owner.
  • Least privilege and short-lived access: scoped, short-lived tokens and credentials injected at call time, so the agent never holds them. Recurring access reviews and one-action deactivation back this up.
  • Policy outside the agent: Agent Gateway and fine-grained authorization make access decisions at request time. The text the model reads can't widen an agent's permissions.
  • Monitoring and immutable evidence: tool calls and authorization decisions go to an immutable System Log and stream to your SIEM.

Topics

  • Datasheet
  • Datasheet
  • AI Agents
  • AI
  • Non-Human Identities
  • Zero Trust
  • Access Control
  • Identity Security Posture Management
  • Okta Platform
  • Threat Detection

Continuez votre parcours dans l‘univers de l’identité